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<?xml encod i ng=*SH I FT- J I S~ ?> 

<dooument_ I abe 1 _termi no I ogy> 
<about_th i s_tenn i no I ogy> 

<seri a l_number>RDST0001</ser ia l_ngraber> 

<title> 

OOCUMENT-tABCL-TERM I N0L0GY 

</title> 

<version>1, 0(K/vers i on> 

<creat 1 on_date>200t/1 2/21 13:37:1 6</creat i on_date> 
<creator>Taro Tokyo</oreator> 

<descr iption>sample document- 1 abe I terminology. </descr i pt i an> 
</about_th i s_term i no I ogy> 
<enumerat?on> 
312-^ <enum^i d>doc_category</enura_i d> 
313^ <enuffl_name>Document Category </enum_name> 
^*^<deacription> Document Category Type</desoriptlon> 
^<item> 

<name> i ntema I _doc</ naroe> 

<descr i pt i on> I nterna I Genera \ Document</descr i pt i on> 



315i 



^</itera> 
r<item> 



31 6^ 



</item> 
r<item> 



<narae> human_res ou rce_doc</name> 

<descrlption>Human-Resouroe Related Doeument</description> 



31 7i 



<name>techn i ca I _doc</name> 

<deseription>Technology Related Document</deficrlptlon> 

</item> 
</enumeratlon> 
<enumeration> 

322-^<enum_ I d>doc_secur i ty_ I eve I </enum_i d> 
323^<enura_name>Docijment Security Leve I </enum_name> 
324 ^<descriptlon>Document Security Level Tyoe</descr i pti on> 
tem> 

<name>bas i c</ name> 

<deacriptlon> Internal Use Only</descriptlon> 



^<dt 

r 



3^5 

*</rtem> 
r<itera> 

32o^ 

f<item> 

327-1 

[</iteni> 
</enumeration> 

</document_ I abe I _t enn i no I ogy> 



<name>i7ied i um</ name> 
<descr i pt i on>C I ass I f 1 ed</descr I pt \ on> 



</>ame>h i gh</name> 

<descr I pt i on>Str ictly Conf i dent I a I </ descr i pt i on> 
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<?XDil version^ 1.0"* encodIng=' r SHlFT-JlS' r ?> 
<do I i cy_term I no ) ogy> 
<about_th i «_termi no I ogy> 

<ser ia l_nuiHber>RDST9487</W i af_number> 

<t i 1 1 e>DOCUMENT-SECUR I TY-POLl CY-TERttt N0L06Y</t i 1 1 e> 

<vers i on>1 . <XK/ vers i on> 

<cr-eat i ot\_date>2001/1 2/21 1 3 : 37 : 1 8</creat i on_date> 
<creator>Taro Tokyo</creator> 

<deecr 1 pt 1 on>samp I e po M cy term i no I ogy. </de$c r i pt i on> 
</about_th 1 s_tenni no I ogy> 

<! — Enumeration of System Types — > 
<enuneratian> 

CenumJ d>systBn_type</enum_ i d> 

<enui»_nane>System Typa</enum_nama> 

<descr i pt i on>Syst«n Type</descr i pt i on> 

<item> 

<name>Cop i eK/name> 

<deecr 1 pt i on>Cop i er </descr i pt i on> 

<opere t i on>oop i er_operat i on </opera t i on> 

</it«n> 
<?teoi> 

<nan>e>Pr i nter</nama> 

Cdescr i pt ion>Pr inter</descr i pt ipn> 

<oper a t i on>p r i nter_operat i on</ operat I on> 

</lt«n> 
<iteuv> 

<naroa>Facsini ls</name> 

<de*tr i pt j on>Facs i m i I e</descr i pt i on> 

<OP*rat i on>f an.operat i on</operat i on> 

</item> 
<item> 

<naraa>Scann*r</name> 

<deacr i pt I on>Scanner</descr I pt l on> 

<operat i on>a winner _oparat i on</oaerat i on> 

</ite«> 
<iteoi> 

<name>OoGunient Repeal tory</name> 

<descr i pt t onXtacument Repos i toryC/descr 1 pt 1 on> 

<operat I on>repoe ) tory operat I on</operat i on> 

</ltem> 
<itefn> 

<name>E-Kteet1 ng</name> 

<descrtptlon>£lectron1o Meeting Syetem</desor!pt1on> 
(operat 1 on>«neet 1 ng_operat i on</operat 1 on> 

</item> 
</enumeration> 
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<! — Enumeration of Operations for Each System Typo—> 
(enumeration> 

<enum_jd>cop i er_operat i on</ anum_i <0 

<enum_naine>Copier Operat ion</enuro_naine> 

<d*&cr i pt i on>Operat i on Regard i ng Cop I er</descr i pt I on> 

<item> 

<nfline>hardcopy</ name> 

<descriptiorCK3opy from Paper to PapeK/dCficript iOn> 
<requireraant>herdcopy .rewi ren*nt</ reoui rement> 
</ltem> 
</*numeratfon> 
<enumeration> 

<anwru i d^pr ' nter_operat i on</ enum_i d> 

<enunlnama>Pr inter Operat ion</enum_name> 

Cdescr I pt i on>Operat i on Regard i ng Pr i nteK/deeCr i pt i on> 

<item> 

<name>pr i nt</nane> 

<deficription>Print Electronic Document on Paper</description> 

Oequ i rement>pr i nt j-eqa i re<nent</requ i reaient> 
</item> 
</e numeration} 
<enumerat 1 on> 

<enum_ I d>f ax^operat 1 on</ enum_ i d> 
<enum_name>Facs ioii le Operat i on</ enum_nBme> 
<deacription>Operation Regarding Fax</description> 
<item> 

<name>f ax_aend</ name> 

<das<iription>Send Fax</deecription> 

<requ i refflanOfax_send_requ 1 remon t</r aqu i r©ment> 
</item> 
<item> 

<naroe>fax_rece i ve</nairve> 

<descriptlon>Receive Fax</description> 

<requ i rement>f ax_rece i ve_requ i rement</requi rement> 
</iteai> 
</enumeration> 
<entaneration> 

<enum_i d>6canner_operet i onC/ enuirU d> 
<enum_name>Scanner Operat i on</ enum_name> 
<description>Ooeratlon Regarding Scanner</description> 
<ltam> 

<naroe>scan</naroe> 

<de$cription>Scan Paper Document into Electronic Oocument</deecription> 
<requ i rement>scan_requ i rement</requ i rement> 
</item> 
</enumeration> 
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<enumerat i on> 

<enum aip i d>r epos i tory_operat \ on</ enum_i d> 

<enura_naine>Document Repository Qperat\Qn</emMjname> 

<descript i on>0pe rat ion Regarding Document Reposttory</descrfptlon> 

<itera> 

<name>store </ name> 

<description>Store</deacrlptlon> 

<requ i rejnent>storc_requ i reman t</ requ i rement> 
</itera> 
<item> 

<name>re v i se</name> 

<deacr i pt i on>Rc v i se/Ed i t</deecr f pt f on> 

<requ i rement>re v i se_requ i reraent</requ i reraent> 
</iten> 
<itera> 

<naffle>de I ete</name> 

<descr i pt 1 on>De I ete/AbandonC/ descr i pt i on> 

<requ i rement>de I ete_requ i reraent</requ i rement> 
</item> 
<item> 

<name>read</name> 

<dascr i pt i ort>Read</descr i pt i on> 

<requ f rement>read_requ i rement</requ i rement> 
</item> 
<itera> 

<name>net_de I Ivery</naaie> 

<descrlptIon> 
Deliver (Transmit) via Network 

</descrIpt!on> 
<requ i remsrrt>ne t_de I i very_requ f rement</ requ i rement> 
</ltem> 
<ftem> 

<name>d i $c_de I i very</ name> 

<descr i pt i on>De I i ver (Send) v i a 0 i sk</ descr ■ pt i on> 
<requ \ rement>d i se_de I i very__requ i rement</requ i rement> 

</item> 

<ltem> 

<narae>arch I ve</ narne> 

<descr i pt i on>Ar oh i ve/Baokup</desor i pt i on> 
<requ i rement>arch i ve_requ i rement</requ i rement> 
</itera> 
<J enuraer at i on> 
^enumerate on> 

<enura_ i d>emeet i ng_operat i on</ enum_ i d> 
<enunwiame>E— Meet i ng Operat i orK/enum_name> 

<description>Operation Regarding Electronic Meeting SystenK/description> 
< i tem> 

<name>roeet i ng^uae</ nanje> 
<de«crlption>Use at Meeting</de6cription> 
<requ i remen t>roeet i ng_use_requ i rement</requ ? rement> 
</item> 
</enumerat i on> 
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<!— Enumeration of Requirements Applicable for Each Operation — > 
<!— User Authentication, Document Identification, Access Control (Use Limitation) are 
provided as Basic Mechanism and not included in Requirements — > 
^enumeration} 

<enum^ id>hardcopy_reou i rement</enum_i d> 

<enum_name>Hardcopy Requ \ rement</ enum_name> 

<descrlption>Reo:ulrements on Copy ing</description> 

<1ten> 

<name>exp I i c r t_author f zat I on</ name> 

<de$cription>Expl iclt Authorizat1on</descrlption> 
</item> 
<ite<n> 

<name>aud i t</ name> 

<deeeription>Record Audit Trai l</descript1on> 
</item> 
<iteiri> 

<name>aud f t je Ith_i maze</ name> 

<desor1ptlon>Record Audit Trail with lina*e</deecr1pt1on> 

</\tom> 
</emaaeratIon> 
<enuraeration> 

<enum_ i d>pr i nt_reau i rement</ enum_ i d> 

<enum_name>Print Requir«oent</enum_name> 

<description> Requirements on Pr intine</description> 

<item> 

Cnans>exp I i c i t^author i zat i on</name> 

<description>Expl icit Authorization (Use Limitation) (/description} 
</item> 
<item> 

<name> aud i t</ name> 

<deecription>Record Audit Trai 1</description> 
</item> 
<item> 

<name>aud i t__w 1 th_i mage^/ name> 

<description>Record Audit Trail with lmage</deecription> 
</it«n> 
<item> 

<name>pr i vate_acce£3</name> 

<description>Paper-Output by One Who Pr inte</deecri0tion> 
</item> 
<item> 

<name>tnjsted_channe l</name> 

<deecription> 
Use Trusted Channel (Encrypt Print Data) 

</description> 
</item> 
<itcm> 

<name>embed_trace_i nf o</ name> 
(description} 

Embed Trace Information in Printout (Watermark. Label. Bar Code) 
</description> 
Vitem> 
</enumeration> 
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<enumeration> 

<enum_ i d>f ax_send_requ i rement</enum_ I d> 

<enunwiame>R&qu i rement on Sending Fax He88age</enun_name> 

<description>Reoulrement8 on Sending Fax ltes3age</description> . 

<item> 

<name>expl lcit_authorlzatlon</name> 

<descr1ption>Exp licit Authorization (Use L|mJtation)</de6Cr iption> 
</item> 
<ltem> 

<nama>aud 1 t</nane> 

<descrlptfon>Recard Audit Tral J</descr?ptfon> 
</item> 
<iten> 

Cname>aud i tj» 1 th_ i mage</name> 

<description>Record Audit Trail with lmage</description> 
</item> 
<itera> 

<name>dest i nat i onjrBstr i ct i arK/nanio> 

<descr 1 pt i on>Oest i nat i on Restr i ct 1 onC/dascr i pt i on> 
</item> 
<item> 

Cnara>pr i vata jnode</ name> 

<description>Transmit in Private Koda</deecript ion> 
</item> 
<it«n> 

<name>t rusted _channe I </rwme> 

<description> 

Use Trusted Channel 

</deacr Ipti on> 
</item> 
<item> 

<name>enfoed_trace_i nfo</ name> 
<description> 

Embed Trace Information in Sent Fax (Watermark, Label, Bar Code) 
C/descrtption> 
</item> 
<item> 

<name>non_repud i at ion</name> 

<deseription>Pr event Repudiation (Aeouire Return Receipt)</deeeription> 
</ltem> 
</enymeratlon> 
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<enumfiratIon> 

<enun „ i d>f ax_rece i ve_requ i reraBnt<Anuai_i d> 
<enutn_name>Reau \ rement on Receiving Fax Me*sage</epum_narae> 
<de»cr»ption>«equiramBnta on Receiving Fax Ee*Sa£B</de5cr iption> 
<}t«n> 

<nans>aud i t</narte> 

<dascription>Record Audit Trai K/descripti on> 
<iten> 

<naf»>audlt_«ith image</name> 

<dBBcriptlon>ftecord Audit Trail with I mage</deser I pt I en> 
</item> 
<it«H> 

<naiK>private.«ccesB</naBe> 

<de*cr iption>Take out Private Fax by One Addressed To</deacrlptron> 
</iten> 
<ited> 

< na ne>t rurted_t i ma*tapp</nania> 

Rescript ion>Trusted Ti«eatamp</desorlptlon> 
</itejn> 
<item> 

<name>entoed .trace, i nf o<Jr\m> 
<description> 

Ued Trace Information in Received Fax (Watermark, Label. Bar Code) 
</description> 

</ltem> 
</ emmer at t on> 
<eruieeratfon> 

<«nu«_i d>acart_reo(j i rement </enum_ i d> 

<en»_name>Scan Roqu I rBa«rTt</BTiuj»_na»e> 

<deftcriptlon>Requirements on Scanning (Requirement* on Storing are applied after storing? 

</deacrlptlon> 

<rt«a> 

<nane>exp I ici t_ author i zat I on</name> 

<dc*cription>Expllcit Authorization (Uae Limitation></daacription> 
</item> 
<iten> 

<name>audit</na«e> 

<deacrlption>Racord Audit Trai l</deecrlption> 
</ite«> 
<\tom> 

<nan»>aud i t_w i th_ i Bia£e</name> 

<description>Record Audit Trai I with lma*e</dMGript«on> 
<item> 

<name>ert ed_trace_ i nf o</name> 
<description> 

E*6ed Trace Information in Scanned Inaea (Watermark. Label. Bar Code) 
</deacription> 
</item> 
</enumcration> 
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<enumeratiQn> 

<enuifl_ i d>atore_reou i rement</enum_ i d> 
<enum_name>Store Requ i remept</enum_nanie> 
<description>Reauiretnents on Storing</description> 
<1tem> 

<name>exp I i o i t_author i zat i on</ name> 

<description>Exp I ic it Authorization (Use Liraitation)</description> 
</ltem> 
<item> 

<name>aud f t</narae> 

<description> Record Audit Tra i 1 </descr i pt i on> 
</itam> 
<item> - 

<name>encrypt lon</name> 

<description>Encrypt Stored Data</description> 
</lt«n> 
<itera> 

<name> i nteer i ty_protect i orK/name> 

<descriptIon>Protect Stored Data from AlteratiorK/descrf ption> 
</item> 
</enumfcrat con> 
<enuraeration> 

<enum_ i d>rev I se^requ i r«nent</ enum_ i d> 
<enun»_name>Rev i se Requ i rement</enum_name> 
. <description>Requiremerit3 on Revising</descr iption> 
<itera> 

<name>exp 1 1 c i t_author i z*t i on</name> 

<descr i pt i on>Exp licit Author i zat i on (Use L i mi tat i on) </desor i pt i on> 
</itetn> 
<item> 

<name>aud i t</name> 

<de«cr f pt i on>Record Aud i t Tre i I </descr I pt J on> 
</item> 
<item> 

< nam e> vers t on i ng</name> 

<descr ? pt i on>Vers i on Contro I </deeer ipt i on> 
</ltem> 
</enumeration> 
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^enumeration^ 

<enuB_i d>de I ete.requ i rement</enu«_ i d> 
<enua_name>Deletc RequirBnent</enuB_narae> 
<de*criptiQn>Requlrements on Detetinj^AbandomngVaeecriptien) 
<lteti> . 

<narae>exp lici t_author i zat i on</na»e> 

<de6criptlon>Expliclt Authorization (Use Li«itation)</descnption> 
</item> 
<iten> 

<naroe>aud i t</ftamo> 

<deecrlptian>Reoord Audit Trai l</doscription> 
</iteni> 
<itcra> 

<name>aud i t_* i th_i rage</naite> 

<dewription>Record Audit Trail with lBaea</dascription> 

</rtoo> 

<it«n> 

<nane>comp I ete_erase</name> 
<dBacriptionX><w»)lete Erase</desoripti©n> 
</item> 
</ ertunertt i on> 
<enumeration> 

<enum_id>read_requ i remenWerrum . i d> 

<enura_najRe>Read Remiireiwnt</«nu^naine>- 

<deacr iptian>RBouirBni6ntE on Read ingC/ds s cr ipt ion> 

<itera> 

<najM>exp I i c it_ author I zatj on</najne> 

<descriptioo>Explicit Authorization (Use Uraitation)</de*cription> 
</rtem> 
<itea> 

<name>»ud it</na»e> 

<de*cription>ftBeord Audit Trai l</de*criptiDn> 
</item> 
<ite*> 

<nam«>ed I t_re*tr i ct i on</najne> 

<daacription>AuthDrizatiort for Readin* Only Edition-frohibited uataC/description> 

</iten> 
<it*«> 

<name>pr i irt_restr I ct i on</nwne> 

<deaeription>Autnorizatlon for Read in Only Print-Prohibited Data</deseription> 
</ite*> 
<ite*> 

<nama> t ocat i on_re8 tr i ct i on</naiiB> 

<de«crlptlpn>AMthprlwttoo Tqt Reading Only R*Jdlnr1^C«l9n-ll«trlcted Oat«</de*crIp^|gn> 
</ltem> 
<rtem> 

<nana>uaar reatr Fotlon</aamB> 

<descrlption>Authorization for Reading Only U*er-*e*tricted Data</description> 
</lten> • 
</anuBerqtion> 
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<enuneration> 

<emn_i d>nBt_de 1 1 very^requ I rement</ enun. i d> 
<crtiim_name>De livery via Network Reftu i reraent</ envm_ nane> 

<dBscription>Requirements on Delivering (Transnittrng) via Netvork</oe5criptlon> 
<item> 

<na«e>e>wl icit-.author i2atfon</naiDB> 

<descriptidn>Exp licit Authorization <Use Limitatior>)</deacription> 
</itan> 
<iteo> 

<name>aud i t </name> 

<description>Record Audit Trai l</descWption> 
</item> 
<ftent> 

<r»me>autflt_with_itna£e</ranie> 

<descriptian>Record Audit Trail with Pma*e</de«cription> 
</itera> 
<ite«> 

<name>ti-ii$ted_channe 1 </nans> 

<description>Use Trusted Channel (Encrypt Trananitted Data) </d«acription> 
<item> 

<nama>des j t i nat i on_r est r i ct i on</na«e> 

<de*criptlon>Destinatlon Restriction (such as Internal Delivery Only) </description> 
</itfta> 
<item> 

<naae>«d i threat" ct 1 on</naine> 

<descriotlon>Authorl2atron for Delivering Only Edition-Prohibited Data</deacription> 
<7«tem> 

<ite«> 

<n aaiB>pr i nt_reatr i ct i on</name> 

<de*cription>AiJthorimion for Delivering Only Print-Prohibited Oata</deacrlptlon> 
</ite*> 
<item> 

<namo> I ocat I on_restr i ct I an<J nasie> 

<descriptian> Authorization for Deliver^ Only Rcadinriwtion-Rwtriotco- D»t»<Ak*Of i«i<*> 
</\ttm> 
<itea> 

<name>OSer_restr i Ct i an</ naaw> 

<description>Authorization for Delivering Only User-Restricted Data</description> 
</it«n> 
(/enumeration* 
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<emmeration> 

<enumj d>d i sc_de I i very_requ i ranent</enum_i d> 
<enum__name>be I \ very via Disc Requ f rement</enum_name> 
<dascription>Raquirement$ on Delivering (Sending) via DUk</description> 
<item> 

<name>exp 1 i c i t_author i zat i on</name> 

<description>£xolicit Authorization (Use Llmitation)</descriDtion> 
</item> 
<item> 

<naa»e>aud i t</ rvame> 

<de&eription>Record Audit Trai l</deacription> 
</iten> 
<itero> 

<name>aud 1 t_w I th_ 1 ma zeKJ name> 

<descriptlan>Record Audit Trail with ]maga</de$or?ption> 
</ltem> 
<ltem> 

<nane>encrypt f on</ name> 

<deserlption>Encrypt Sent Data</deacription> 
</item> 
<ltem> 

(name) i ntegr I ty ^protect I on </nane> 

<descr!ption>Protect Sent Data from AlteratiorK/descrIption> 
</ite*> 
<item> 

<name>ed i t_restr 1 ct i on</name> 
<description>Authorization for Sending Only Edition-Prohibited Data</dt£criotion> 
</it*n> 
<item> 

<na«e>pr i nt_reetr i ct i on</name> 
<descr I pt f on> Author list ion for Sending Dnly Print-Prohibited Data</descrlption> 
</itam> • 
<item> 

< name> I ocat i on_restr i ct i on</name> 
<d6seription>Autncn'i2at1on for Sending Only Readinr"t*oatlBn-Re*tri<Jted Oata</deeer 1 pt i on> 

</item> 

<itera> 

<name>user_re«triction</name> 
<descr?ptran>AiJthor?zatlon for Sending Only User-Restricted Data</dcscription> 
</item> 
</enumeration> 
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<enumeration> 

<enum_i d>aroh i ve_requ i renient</enumjd> 
<enum_name>Arch i ve Rsqu i rcroent</enum_name> 

<description>Requirements on Archiving/Backing--up</descrlpt!on> 
<item> 

<name>exp I i c \ t_author 1 zat i on</ name) 

<descripti on>Exp I icit Authorization (Use Limitation) </desoription> 
</item> 
<itefn> 

<name>aud i t</ natne> 

<descr 1 pt i on>Record Aud It Tral I </descr i pt i on> 
</item> 
<item> 

<narne>encrypt i on</nama> 

<descrlption>Encrypt Archived Data</descr i pt i on> 
</item> 
<!tem> 

<narae> i ntesr i ty_protect i on</ name> 

<description>Protect Archived Data from Alteratton</descriotion> 

</item> 
</enumeration> 
<enumeration> 

<enum_i d>roeet i n^_uae_requ i rement</ enum_i d> 

<enum_name>lleet i ng-use Requ i rement</ enum_name> 

<desoription>Reouirements on Using at MeetingC/desoript ion> 

<item> 

<namo>exp Hoi t_author i zat i on</naroe> 

<description>Expl icit Authorisation (Use Linutation)</de$cription> 
</item> 
<item> 

<name>aud i t</r\ame> 

<description>Record Audit Trai K/description> 
</iteni> 
<item> 

<name>aud I t_wl th_ image</name> 

<dascrrption>Record Audit Trail with lmaee</description> 
</item> 
</ enumerat i on> 
</po 1 1 cy_term i no I ogy> 
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<?xml version^. 0" encoding^SHIFT-JlS" ?> 
<document_security_pol Icy> 
<abo(/t_thic_pol ioy> 

<ser \ a Lnumber>RDSP2023</W i a I __nurober> 
<term I no I ogy_app If ed>RDST94«7</terroi no I oey_epp 1 1 ed> 
<t i 1 1 e>D0CUMEKT-SECUR I T7-P0L I CY</t i 1 1 e> 
<version>1. 30</version> 

<ereat i on_date>2002/02/1 8 22 : 30 : 24</creat i an_date> 
<creetor>Taro Tpkyo</creator> 

<description>sample document security pol icy. </desoript ion> 
</about_th i s _policy> 
200h«^<polioy> 

<acc_rule>-r-.20l1 

{<doc_cateeory>ANY</ doo_oategory> 
<doc_secur i ty_ I eve I >bas i c</doc_secur ! ty_ I eve I > 
<acl> 

<ace> 

<user_category>ANY</u$er_eategory> 
<user_secur i ty_ I eve I >ANY</user_seour i ty_ I eve l> 
<operation> 

<name>hardoopy</nanie> 

<allowed/><! — allowed without any requirement — > 
</operation> 
<operat i on> 

<name>pr i nt</name> 

<aMowed/><! — allowed without any requirement — > 
</operation> 
<operation> 

<name>fax_send</name> 
<requ i reroent>aud i t</requ i rement> 
<requ i reraent>exp M c i t_au thor i zat i on</ requ \ rement> 
</operation> 
<operation> 

<name>f ax_rece i ve</name> 

<a 1 1 owed/>< ! — all owed w i thout any requ I rentent — > 
</operation> 
<pperat j on> 

<name> b ca n</name> 

<allowed/><! — allowed without any requirement — > 
</operatlon> 
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<operat i on> 

<narae>store(/name> 

<allowed/><! — allowed without any requirement — > 
</operation> 
<operatlon> 

<name>rev i seC/narae> 

<allowed/><! — allowed without any requirement — > 
</operation> 
<operation> 

<name>de I ete</name> 

<allowed/><! — allowed without any requirement — > 
</operat I on> 
<operation> 

<nama>read</ name> 

<al lowed/><! — allowed without any requirement — > 

</operat i on> 

<operation> 

<narae>net_de I i very</name> 

<requ i rement>aud I t</requ i rement> 

<r equ i rement>exp I i c i t_author i zat i on</ requ i rement> 

<requ i rement>pr i nt_restr i ot i orK/ requ i rement> 

<requ i rement>trusted_channe I </requ i rement> 

</operation> 

<operation> 

<name>d i sc_de I i very</ name> 

<requ i rement>aud I t</requ i reraent> 

<requ i remenOexp I i c i t_author i zat i on</ requ i remenO 

<requ i rement>pr i nt_restr i ct i on</ requ f rement> 

</operation> 

<operation> 

<name>arch i ve</name> 

<aIlowed/><!— allowed without any requirement — > 
</oDeration> 
<operetfon> 

<name>meet i ng_use</ name> 

<allowed/><! — allowed without any requirement — > 
</ooeration> 
</ace> 
</aol> 
</acc_r u I e> 2 01 2 
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2000 



<acc_ru I e>'^ 2021 

J <doc_category>ANY</doo_category> 
L <doc_secur i ty_l eve I >med i um</doo_seour i ty_l eve \ > 
<acl> 

<ece> 

9fW7l <user_category>00C-CATEG0RY</u3er_category> 



<user_secur i ty J eve I >ANY</ user ^secur i ty_ I eve I > 
<operation> 

<narae>hardcopy</ narae> 

<requ 1 r emsnt>aud i t</requ ! r ement> 

<requ i rement>embed_tracB_i nf o</requ i rement> 
</operation> 
<operation> 

<name>pr I nt</ name) 

<requ i rement>aud i t</ requ i rement> 

<requ i reroent>embed_trace_ i nf o</requ i rement> 
</operation> 
<operat i on> 

<nane>f ax_aend</narae> 

<denied/> 

<I — denied even if it is explicitly authorized — > 
</operation> 
<operst lon> 

<narae>f ax_rece i ve</name> 

<allowed/X! — a I lowed without any requirement — > 
</operation> 
<operat I on> 

<name>acan</naine> 

<requ i rement>aud I t</requ i reraent> 

<requ i rement>embed_trace_i nf o</requ i rement> 
</operation> 
<operatlon> 

<name>store</ name> 

<a 1 1 owed/>< ! — all owed w i thout any requ i reraent — > 
</operation> 
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<oper at i on> 

<name>r ev i ee</name> 

<aliowed/><] — allowed without any requirement — > 
</operation> 
<operat i on> 

<name>de I ete</name> 

<allowed/Xl — allowed without any requirement — > 

</ooeration> 

<operatlon> 

<name>readC/ name> 

<requ \ rement>aud t t</requ I rement> 

<requ 1 rement>pr I nt_reat r i ct i on Cj requ i r ement> 

<requ I reroenO locat i on_restr ict \ on</requ i rement> 

</operatlon> 

<operation> 

<name>net M de I i very</name> 

<r equ I r emen t>aud i t</requ i rement> 

<requ 1 rement>exp 1 lei t_authori zat i on</requ i remerrt> 

<requ J reinent>pr i nt_re* tr i ct c an</requ i retnon t> 

<requ I rement>tru3ted_channe I </ requ i rement> 

</operation> 

<operation> 

<7iaroe>d i sc_de I i very </najne> 

<requ i remenOaudi t</requi rement> 

<requ i rement>exp H c i t_airthor i 2 at I on</requ I renent> 

<requ i rement>pr i nt_restr i ot \ on</reou 1 rement> 

</ooeration> 

<operation> 

<nane>arch i ve</name> 

<a! lowftd/X! — allowed without any requirement — > 
</operatlon> 
<operatlon> 

<n«une>tteet I ng_use</najne> 

<a 1 1 owed/><! —'all Owed wl thout any requ i rement — > 
</operation> 
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<ace> 

f <U3er_category>AKY</user_category> 
L <ueer_seour i ty_ I eve I >ANY</user_secur I ty_ I eve I > 
<operation> 

<name>herdcopy</naiiie> 

<den i ed/> 

<! — denied even if it is explicitly authorized 
</operat ion> 
<operation> 

<name>pr i nt</name> 

<denied/> 

<| — denied even if it is explicitly authorized 
</operation> 
<operation> 

<name>fax_send</naroe> 

<denled/>~ 

<! — denied even if it is explicitly authorized 
</operation> 
<operatibn> 

<name>f axjrece i ve</name> 

<denied/> 

<! — denied -even if it is explicitly authorized 
</operation> 
<operation> 

<name>scan</ narae> 

<denied/> 

<! — denied even if it is explicitly authorized 
</operation> 
<operation> 

<name>store</name> 

<denied/> 

<! — denied even If it Is explicitly authorized 
</operation> 
<operation> 

<name>re v i se</ name> 

<denied/> 

<!— denied even if it Is explicitly authorized 
</operation> 
<operation> 

<naree>de I ete</name> 

<denied/> 

<! — denied even if it is explicitly authorized 
</operation> 
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<dperation> 

<name>read</name> 

<r equ i rement>exp I i c i t_author i zet I on</ requ f rement> 
<requ i rement>aud i t </ requ 1 rement> 
<reQU i rement>pr i nt_restr t ct I on</requ i renjent> 
<requ i rement> I ooat i on_restr i ot i on</requ i rement> 

</operation> 

<operation> 

<narae>net_de I i very</ naroe> 
<denied/> 

<! — denied even if it is explicitly authorized — > 
</operation> 
{operation} 

<naroe>d I ee_de I i very</name> 

<denred/> 

<! — denied even if it is explicitly authorized — > 
</operation> 
<operat i on> 

<nanie>arch I ve</name> 

<den i ed/> 

<! — denied even if it is explicitly authorized — > 
</operation> 
<opera t i on> 

<name>nieet i ng_use</name> 

<denied/> - 

<! — denied even if it is explicitly authorized — > 
. </operation> 



</aoe> 
</acl> * 
</ acc_ru I e> 2022 
<acc_rule>"^2031 

f <doc_category>ANY</doc_category> 
^**\ <doc_seour i ty_ I eve I >h i gh</doo_6ecur i ty_ I eve I > 
<acl> 

<aoe> 

9iM S <user_category>DOC-CATEGORY</ user_categary> 



<user w secur i ty_ I eve I >ANY</user_secur i ty_l eve I > 
<operation> 

<name>hardcopy</ name> 
<den i ed/> 

<!— denied even if it is explicitly authorized — > 
</operation> 
<operation> 

<name>pr i nt{/ name> 

<requ i rement>exp I tci t_author i zat i on</ requ i rement> 
<requ i rement>aud i t</requ i reni8nt> 
<requ i reraent>pr i vfite_access</ requ i renient> 
<requ i reroent>trusted_channe I </requ i rement> 
<requ i rernent>embed_trace_i nf </requi rement> 
</operation> 
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<operat i on> 

<name>f ax^.s end</nanie> 
<dented/> 

<! — denied even if it is explicitly authorized — > 
</operatton> 
<operation> 

<name>f ax^reee i ve</name> 

<allowed/><!— allowed without any requirement — > 
</operation> 
<operation> 

<n ame>scan </name> 

<deni'ed/> 

<!— denied even if it is explicitly authorized — > 
</operation> 
<operation> 

<name>store</name> 

<requ i reraent>aud i t</requ i rement> 

<requ i rement>encrypt I on</reau i rement> 

<requ i rement> i ntegr i ty .protect i on</requ i rement> 
</ope ration) 
<operation> 

<naro8>rev \ se</nanie> 

<r$qu i rement>var* i on i ng</reau i rement> 
</operation> 
<operat i on> 

<name>de J ete</ n a m e> 

<reou i rement>comD I ete_erase</Vequ I rement> 

V^pe^ation) 

<operation> 

<n ame> read</n ame > 

<reau i rement>aud i t^/reou i rement> 

<requ i rement>pr ] nt_reatr i ct i on</requ I rement> 

<requ I rement> locati on_reatr i ct i orK/requ i rement> 

<requ I rement>ueer_restricti on</requirement> 

</operation> 

<operation> 

<name>net_del ivery</name> 
<den i ed/> 

<!— denied even if it is explicitly authorized — > 
</operation> 
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<operatfon> 

<name>d i eo_de \ ivery</name> 

<requ i rewnt>audi t</requ f rement> 

<requ i reroent>expl f c i t_author i zat ion</requ i rement> 

<requ i reroent>enorypt i on</ requ i rement> 

<requ i rement>pr j nt_restr i ct i on</requ i reraent> 

</operation> 

<operat<on> 

<name>areh I ve</name> 

<requ i rement> encrypt ion</requ I rement> 

<requ i r ement> i ntegr i ty ^protect i on</requ i r ement> 

</operation> 

<operation> 

<narae>meet i ng_use</name> 

<requ i rement>exp M c I t_author i zat i on</requ i rement> 
</operation> 
</ace> 
<aoe> 

H<us er_category>ANY</us er_category> 
<user_secur i ty_ J eve I >ANY</ user_secur i ty^ I eve I > 
<aperation> 

<pame>hardcopy</narae> 
<denied/> 

<! — denied even if it is explicitly authorized — > 
</operation> 
<operation> 

<name>pr i nt</name> 

<denied/> 

<! — denied even If it is explicitly authorized — > 
</operation> 
<operation> 

<name>fax_send</name> 

<denied/> 

<! — denied even If it is explicitly authorized — > 
</operation> 
<operat i on> 

<name>f ax^rece i ve^/ name> 

<denied/> 

<?— denied even if it is explicitly authorized — > 
</operation> 
<operation> 

<neme>$can</name> 

<denied/> 

<1— denied even if it is explicitly authorized — > 
</operation> 
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<operation> 

<name>8tore</naine> 
<denred/> 

<! — denied even if it t« explicitly authorized — > 
</operation> 
<operation> 

<name>rev i se</naine> 

<denied/> 

<! — denied even if it is explicitly authorized — > 
</operation> 
<aperat!on> 

<name>de I ete</nane> 

<den i ed/> 

<!— denied even if it i« explicitly authorized — > 
</operation> 
<cperation> 

<nama>read</ peme> 

<requirement>expl icit .author! zatiorK/reauireo)ent> 
<requi rement>audi t</reou i rement> 
<requ i reinent>pr interest rt ct t ort</requi rement> 
<requ \ rement> I ocat i on__res tr i et t on</ requ i rement> 
<requ \ reman t> w$er j*estr i ct i on</requ i rement> 

</operatlon> 

<operatlon> 

<name>net_de 1 lvery</naine> 
<den1ed/> 

<[ — dented even If It la explicitly authorized — > 
</operatlon> 
<operatlon> 

<narae>d I gc_de I \ very</name> 

Cdenied/> " 

<!— denied even if ft Is explicitly authorized — > 
</operatlon> 
<operatlon> 

<name>arch \ ve</ nene> 

<den ied/> 

<! — denied even if it is explicitly authorized — > 
</operation> 
<operation> 

<na«a>fl)eet i ng_u$e</najne> 

<denied/> 

<!— denied even if it is explicitly authorized — > 
</operation> 
</*ce> 

C/acc_rule> w*2032 
^</pol icy> 
</docunent_secur i ty_po I i cy> 
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<policy> 

221 vr<acc_rule> 

232-f <cioc « cate 9ory>ANY</<Joc_category> 

L <doc_security_level>mediuni</doc_security level> 
223-^<acl> 

224-rv <ace> 

225w-s<; User ^ cate g Or y >D0C _ CAXEG0R y 

</user_category> 
226 ^-r%< u s e r_s ecur i ty_l e ve 1 > ANY 

</user_security_level> 
227^—<operation> 

22ff-^v< name > f ax__send< /name> 
229^-r-<cienied/>< i — denied even if it 

is explicitly authorized — > 
</operation> 
2 2 7 *- rN <operation> 

<name>net_delivery</name> 
230>^rx< r equi r emen t> and i t 

</requirement> 
231 ^/^<requirement> 

explicit_authorization 
</requirement> 

</operation> 
227 *-r^< 0 p e r a t ion> 

<naiae>f ax_receive</name>- 
232N^rNCallowed/>< !— allowed 

without requirements — > 
</operation> 

</ace> 
224v ^<ace> 

</ace> 
</acl> 
</acc_rule> 
221 •^ rs <acc_rule> 

<doc_category>ANY</doc_category> 

<doc_security_level>high</doc_security_level> 

<acl> 

</acl> 
</acc_rule> 
</policy> 
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<policy> 

<acc_rule> 

<doc_category>ANY</doc_category> 

<doc_security_ k level>medium</doc_security_level> 

<acl> 

<ace> 

<user_category>DOC-CATEGORY</user_category> 

<user_security_level>ANY</user_security_level> 
241^/^<denied_operation3> 

<i — denied even if it is explicitly 
authorized — > 

<name>fax__send</name> 
</denied_operations> 
<operation> 

<name>net_delivery</name> 
<requireraent>audit</requireraent> 
242-o-^< re q U i reIuen -t>explicit -- authorizatioii 
</requirenient> 

</operation> 
<operation> 

</operation> 
243^rN<allowed_operations> <1 — allowed without 

requirements — > 
<narne> f ax^r eceive< /name> 
<name> sta r e</name> 

</allowed_ operations > 
</ace> 
<ace> 

</ace> 

</acl> 
</acc_rule> 
<acc_rule> 

<doc_category>ANY</doc_ category> 

<doc_security__level>high</doc_security_level> 

<acl> 

</acl> 
</acc_rule> 
</policy> 
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